Backdoor.Gspy.A

By JubileeX in Backdoors

Threat Scorecard

Threat Level:	60 % (Medium)
Infected Computers:	100

First Seen:	December 27, 2011
Last Seen:	November 21, 2020
OS(es) Affected:	Windows

Backdoor.Gspy.A is a harmful backdoor Trojan that penetrates into the affected PC system without your consent and awareness and then tries to steal sensitive data such as your banking details and various others login information such as user names and/or passwords. Backdoor.Gspy.A lowers the security level of your computer system in order to enable cybercriminals to obtain remote access and control over your PC without your knowledge. Backdoor.Gspy.A is complicated to identify if you are not a sophisticated computer user, because it does not have an interface nor does it display disturbing pop-up messages. However, the occurrence of the particular process files in the Task Manager shows that Backdoor.Gspy.A exists on your PC. Backdoor.Gspy.A always runs in the background of your computer system, because when installed, it modifies the registry by adding a RUN key so that it can start automatically each time you boot up your PC system. Backdoor.Gspy.A also compromises several legitimate processes in order to bypass detection by anti-virus software. Backdoor.Gspy.A is able to change system settings, delete files and download malicious files that usually involve other types of malware infections. In order to download and run the said files Backdoor.Gspy.A connects to remote Russian web pages. You should use a genuine malware removal tool to rid your machine of Backdoor.Gspy.A.

Table of Contents

Aliases

15 security vendors flagged this file as malicious.

Anti-Virus Software	Detection
AVG	BackDoor.Generic15.NTZ
Fortinet	W32/BackDoor.1GT!tr
AhnLab-V3	Win-Trojan/Gspy.111616
AntiVir	BDS/GSpy.A.61
BitDefender	Backdoor.Generic.705834
Kaspersky	Trojan-Dropper.Win32.Injector.cwcu
NOD32	a variant of Win32/Kryptik.ABNX
McAfee	Generic BackDoor!1gt
CAT-QuickHeal	TrojanDropper.Injector.cwcu
AVG	Dropper.Generic4.CJIX
AntiVir	BDS/GSpy.A.6
DrWeb	Trojan.Inject.57971
BitDefender	Trojan.Generic.KDV.441331
Kaspersky	Trojan-Dropper.Win32.Injector.aahv
NOD32	a variant of Win32/Kryptik.WAF

SpyHunter Detects & Remove Backdoor.Gspy.A

File System Details

Backdoor.Gspy.A may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	mshtune.exe	24859fe4971fe4e6fd496d513e75fd70	19
Name: mshtune.exe MD5: 24859fe4971fe4e6fd496d513e75fd70 Size: 122.88 KB (122880 bytes) Detections: 19 Type: Executable File Path: %ALLUSERSPROFILE% Group: Malware file Last Updated: January 1, 2012
2.	_ex-68.exe	245bb510505a536364677cd395653e53	14
Name: _ex-68.exe MD5: 245bb510505a536364677cd395653e53 Size: 884.22 KB (884224 bytes) Detections: 14 Type: Executable File Path: %WINDIR%\Temp Group: Malware file Last Updated: January 17, 2012
3.	NUSB3w32.dll	d00f284ec2cdb0ed59db00dcb7b00fbf	6
Name: NUSB3w32.dll MD5: d00f284ec2cdb0ed59db00dcb7b00fbf Size: 157.18 KB (157184 bytes) Detections: 6 Type: Dynamic link library Path: %WINDIR%\system32 Group: Malware file Last Updated: January 1, 2012
4.	ciohb.exe	af19f2e7b32484c29ebb78178bbbea74	6
Name: ciohb.exe MD5: af19f2e7b32484c29ebb78178bbbea74 Size: 118.78 KB (118784 bytes) Detections: 6 Type: Executable File Path: %ALLUSERSPROFILE% Group: Malware file Last Updated: February 6, 2012
5.	appmgmts.dll	67e0da396b8cc5b479db96d7e46ae016	5
Name: appmgmts.dll MD5: 67e0da396b8cc5b479db96d7e46ae016 Size: 83.11 KB (83112 bytes) Detections: 5 Type: Dynamic link library Path: %WINDIR%\System32 Group: Malware file Last Updated: March 8, 2012
6.	audiodrvx.exe	0f3e99946f676bb3e191a599890298fa	4
Name: audiodrvx.exe MD5: 0f3e99946f676bb3e191a599890298fa Size: 1.44 MB (1444864 bytes) Detections: 4 Type: Executable File Path: %PROGRAMFILES%\RealtekAudioDriver Group: Malware file Last Updated: January 1, 2012
7.	Anti-Malware.exe	53486bf93b2e14b8173a02f5423873fb	4
Name: Anti-Malware.exe MD5: 53486bf93b2e14b8173a02f5423873fb Size: 44.54 KB (44544 bytes) Detections: 4 Type: Executable File Group: Malware file Last Updated: January 1, 2012
8.	ozzok.exe	5faa7090b955aa3b1f36f8d3b76b2e1d	4
Name: ozzok.exe MD5: 5faa7090b955aa3b1f36f8d3b76b2e1d Size: 119.8 KB (119808 bytes) Detections: 4 Type: Executable File Path: %ALLUSERSPROFILE% Group: Malware file Last Updated: January 30, 2012
9.	gsmej.exe	62017e70d3f8ef4f9d0119dfa801d4f1	4
Name: gsmej.exe MD5: 62017e70d3f8ef4f9d0119dfa801d4f1 Size: 114.17 KB (114176 bytes) Detections: 4 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: January 23, 2013
10.	pdf_converter.exe	a581e1f494e19e6b66300324157f7ae0	3
Name: pdf_converter.exe MD5: a581e1f494e19e6b66300324157f7ae0 Size: 421.37 KB (421376 bytes) Detections: 3 Type: Executable File Path: C:\Users\<username>\Desktop\Desktop 99\Stuff\ANTIGO DESKTOP\Desktop 2\pdf_converter.exe Group: Malware file Last Updated: February 7, 2023
11.	waada.exe	e44f9ed4b80933bcbeae5fed70db0ed7	3
Name: waada.exe MD5: e44f9ed4b80933bcbeae5fed70db0ed7 Size: 121.34 KB (121344 bytes) Detections: 3 Type: Executable File Path: %ALLUSERSPROFILE% Group: Malware file Last Updated: January 23, 2012
12.	depzk.exe	8e0bdc022352d70464b5732a82b91c24	3
Name: depzk.exe MD5: 8e0bdc022352d70464b5732a82b91c24 Size: 133.63 KB (133632 bytes) Detections: 3 Type: Executable File Path: %ALLUSERSPROFILE% Group: Malware file Last Updated: March 6, 2013
13.	saaxh.exe	1a2ba21b0bc9bbdcc49c46c79aadd5dc	3
Name: saaxh.exe MD5: 1a2ba21b0bc9bbdcc49c46c79aadd5dc Size: 111.61 KB (111616 bytes) Detections: 3 Type: Executable File Path: %ALLUSERSPROFILE% Group: Malware file Last Updated: March 6, 2013
14.	rndbs.exe	93d9e505723fceee6333e366fb16cf13	2
Name: rndbs.exe MD5: 93d9e505723fceee6333e366fb16cf13 Size: 71.79 KB (71798 bytes) Detections: 2 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: January 1, 2012
15.	xhygu.exe	ac1202cfecd7108abded035a852c2fa1	2
Name: xhygu.exe MD5: ac1202cfecd7108abded035a852c2fa1 Size: 114.68 KB (114688 bytes) Detections: 2 Type: Executable File Path: %ALLUSERSPROFILE% Group: Malware file Last Updated: February 8, 2012
16.	Svchost.exe	29a2795ae51ed87d110f0e26a2bcd82f	2
Name: Svchost.exe MD5: 29a2795ae51ed87d110f0e26a2bcd82f Size: 668.67 KB (668672 bytes) Detections: 2 Type: Executable File Path: %APPDATA%\WinDir Group: Malware file Last Updated: January 19, 2012
17.	qdlrj.exe	8319605f9c49e058a7eca47f65848c47	2
Name: qdlrj.exe MD5: 8319605f9c49e058a7eca47f65848c47 Size: 118.27 KB (118272 bytes) Detections: 2 Type: Executable File Path: %ALLUSERSPROFILE% Group: Malware file Last Updated: June 6, 2012
18.	vluge.exe	e9a0146f30875831996daecf97371b67	2
Name: vluge.exe MD5: e9a0146f30875831996daecf97371b67 Size: 118.27 KB (118272 bytes) Detections: 2 Type: Executable File Path: %ALLUSERSPROFILE% Group: Malware file Last Updated: January 30, 2012
19.	vlopq.exe	57c69b71c6dcbbac337861087cd1d5e3	2
Name: vlopq.exe MD5: 57c69b71c6dcbbac337861087cd1d5e3 Size: 113.66 KB (113664 bytes) Detections: 2 Type: Executable File Path: %ALLUSERSPROFILE% Group: Malware file Last Updated: October 15, 2012
20.	qreys.exe	9b10e4c69d716cb01aa0599829441768	2
Name: qreys.exe MD5: 9b10e4c69d716cb01aa0599829441768 Size: 116.22 KB (116224 bytes) Detections: 2 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: February 25, 2013
21.	htBCSvc32.exe	ca12b34694feea88a8056cabd73258f6	1
Name: htBCSvc32.exe MD5: ca12b34694feea88a8056cabd73258f6 Size: 1.89 MB (1890304 bytes) Detections: 1 Type: Executable File Path: %WINDIR%\system32 Group: Malware file Last Updated: January 1, 2012
22.	msmsgs.exe	6a1365083f768e50d134218890d5d6c4	1
Name: msmsgs.exe MD5: 6a1365083f768e50d134218890d5d6c4 Size: 1.1 MB (1105412 bytes) Detections: 1 Type: Executable File Path: %PROGRAMFILES%\Messenger Group: Malware file Last Updated: January 1, 2012
23.	usmme.exe	8bf08b9eef967da31722c215acc4b87f	1
Name: usmme.exe MD5: 8bf08b9eef967da31722c215acc4b87f Size: 131.07 KB (131072 bytes) Detections: 1 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: January 16, 2012
24.	53499.exe	1c8e74d00d35341e0034dcfe0f0f7781	1
Name: 53499.exe MD5: 1c8e74d00d35341e0034dcfe0f0f7781 Size: 199.16 KB (199168 bytes) Detections: 1 Type: Executable File Path: %APPDATA%\D6DC4 Group: Malware file Last Updated: January 1, 2012
25.	lmjwl.exe	e2ff48c54a6d7e0bff237b7b03b7a13a	1
Name: lmjwl.exe MD5: e2ff48c54a6d7e0bff237b7b03b7a13a Size: 118.78 KB (118784 bytes) Detections: 1 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: April 27, 2012
26.	ckazo.exe	c5f7eb582b54d2e893276a1725e504e5	1
Name: ckazo.exe MD5: c5f7eb582b54d2e893276a1725e504e5 Size: 119.29 KB (119296 bytes) Detections: 1 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: February 13, 2012
27.	Anti-Malware.exe
Name: Anti-Malware.exe Type: Executable File Group: Malware file
28.	htBCSvc32.exe
Name: htBCSvc32.exe Type: Executable File Group: Malware file
29.	_ex-68.exe
Name: _ex-68.exe Type: Executable File Group: Malware file
30.	53499.exe
Name: 53499.exe Type: Executable File Group: Malware file
31.	pdf_converter.exe
Name: pdf_converter.exe Type: Executable File Group: Malware file
32.	qrvzd.exe
Name: qrvzd.exe Type: Executable File Group: Malware file
33.	msmsgs.exe
Name: msmsgs.exe Type: Executable File Group: Malware file
34.	waada.exe
Name: waada.exe Type: Executable File Group: Malware file
35.	usmme.exe
Name: usmme.exe Type: Executable File Group: Malware file

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Backdoor.Gspy.A

Threat Scorecard

EnigmaSoft Threat Scorecard

Aliases

SpyHunter Detects & Remove Backdoor.Gspy.A

File System Details

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen